Trezor

Wallet Vulnerability

Estimated loss

—

VERDICT —UNRATED

Verdict pending. Auto-ingested incidents are reviewed before a public verdict is rendered.

▰ METHOD

Undisclosed

Root cause

Root-cause analysis not yet published. The incident description below contains all currently available signal — review the attack transaction directly for definitive forensics.

Forensic narrative

An attacker with a stolen device can extract the seed from the device. It takes less than 5 minutes and the necessary materials cost around 100$. This vulnerability affects Trezor One, Trezor T, Keepkey and all other Trezor clones. Unfortunately, this vulnerability cannot be patched. Attack method (per SlowMist): Wallet Vulnerability. Reported loss: -.

Primary source

https://ledger-donjon.github.io/Unfixable-Key-Extraction-Attack-on-Trezor/ ↗

Sourced from

slowmist

Technical record